Static task
static1
Behavioral task
behavioral1
Sample
df5ab460a9e00f46fd4fea22039cf22a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df5ab460a9e00f46fd4fea22039cf22a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
df5ab460a9e00f46fd4fea22039cf22a_JaffaCakes118
-
Size
46KB
-
MD5
df5ab460a9e00f46fd4fea22039cf22a
-
SHA1
202896dd6e6427d09060636dc6cbcfea5f12ebac
-
SHA256
4563520d519b1ff252356f1d08f5c5e4c703d353281317e237c5bae563b242a5
-
SHA512
95b73b10fcc4eac336a770950e70190a3a0955ebbe147fbf693cc06378accb465792e7490d3a16408d99fb0a4f0a1eb44be1d56c1151983e928f5d91eb2e89d4
-
SSDEEP
384:XMMuh6AvaZv38Y9IZ3yCHItJiE1B8SbxIf9DVhU19k+XzSIXo5VC7na3P1+AhYb6:XMM+Qv3iRyw88sxKV+1PF454CPg2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5ab460a9e00f46fd4fea22039cf22a_JaffaCakes118
Files
-
df5ab460a9e00f46fd4fea22039cf22a_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ